Release artifacts: hash the committed Cargo.toml

Merged
AF
5d ago
+39-3

Accepted agent delivery; branch-keyed search descriptor included.

Summary by cubic

Fixes the release manifest digest mismatch that stopped the 0.60.0 release on Windows builds, where CRLF line endings changed the Cargo.toml hash and broke publication.

  • Hashes the committed Cargo.toml blob via git show HEAD:Cargo.toml so all platforms record the same digest for the same commit.
  • Adds a test verifying CRLF and LF checkouts produce the same digest.
  • Registers a new land/release-manifest-digest benchmark descriptor.

RetriggerView in GreptileConfidence Score: 5/5

The PR appears safe to merge; no actionable issues were found.

Summary

Release artifacts now hash the committed Cargo.toml in both build metadata and publication checks.

  • Release artifact manifests use the committed Cargo.toml hash.

Reviews (1) · Last reviewed commit: "landing: describe release-manifest-diges..." · Reviewed by Greptile